Question 1

What is a key component of governance in the context of cybersecurity?

Options :

A : Defining roles and responsibilities

B : Standardizing technical specifications for security control

C : Defining tools and technologies

D : Enforcement of the Penetration Testing procedure

Answer: A

Question 2

ENISA: To mitigate credential compromise or theft, cloud provider can implement:

Options :

A : HR background checks

B : Hardening of virtual machines according to industry standard guidelines

C : Data-at-rest encryption

D : Portable applications using open APIs

E : Anomaly detection capabilities

Answer: A

Question 3

What is the best definition of the cloud information governance domain of custodianship?

Options :

A : Defines the sum of regulatory requirements

B : Defines compliance requirements

C : Defines the owner of the date

D : Defines who manages the data

Answer: D

Question 4

ENISA: Which of the following is among the vulnerabilities contributing to a high risk ranking for Network Management?

Options :

A : User provisioning vulnerabilities

B : AAA vulnerabilities

C : System or O/S vulnerabilities

D : Hypervisor vulnerabilities

E : Inadequate physical security procedures

Answer: C

Question 5

Which of the following BEST describes a benefit of Infrastructure as Code (IaC) in cybersecurity contexts?

Options :

A : Reduces the need for security auditing

B : Enables consistent security configurations through automation

C : Increases manual control over security settings

D : Increases scalability of cloud resources

Answer: B